Distrusting certificates issued by Symantec

From Hostek.com Wiki
Jump to: navigation, search


Beginning in 2018 as outlined below, Chrome will begin Distrusting certificates issued before certain dates by Symantec.

- Chrome 66 - Beginning April 17, 2018 - Distrusting certificates issued by Symantec before June 1, 2016

SOLUTION: In February to March 2018, all certificates issued before "June 1, 2016" need to be re-issued. NOTE: For most certificates this will not be an issue since they get re-issued annually. Where this applies is multi-year certificates.


- Chrome 70 - Beginning October 23, 2018 - All Symantec certificates issued from their present roots will not be trusted

SOLUTION: In August to September 2018, all certificates issued on the old parent roots need re-issued with Symantec's SubCA infrastructure, which should be available starting December 1, 2017. NOTE: This would mean certificates issued October 2017 through November 2017 will need to be re-issued in August to September of 2018.